EUVD-2013-1976

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2013-1988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors...

RHEL 5 : libxres (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libXRes: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1988 Note that Nessus has not...

SUSE CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

new packages: libXres

An update is available for libXres. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Slackware: Security Advisory (SSA:2017-291-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 14.1 / 14.2 / current : libXres (SSA:2017-291-01)

New libXres packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-291-01. The text itself is copyright ...

[slackware-security] libXres

New libXres packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libXres-1.2.0-i586-1slack14.2.txz: Upgraded. Integer overflows may allow X servers to trigger allocation of insufficient memo...

Amazon Linux: Security Advisory (ALAS-2014-452)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Solaris Third-Party Patch Update : xorg (multiple_vulnerabilities_in_x_org)

The remote Solaris system is missing necessary patches to address security updates : - Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function. CVE-2013-1983 -...

Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...

Medium: libX11, libXcursor, libXfixes, libXi, libXrandr, libXrender, libXres, libXt, libXv, libXvMC, libXxf86dga, libXxf86vm, libdmx, xorg-x11-proto-devel

Issue Overview: Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws t...

openSUSE Security Update : libXres (openSUSE-SU-2013:1027-1)

This update of libXres fixes several integer overflow issues. - U0001-integer-overflow-in-XResQueryClients-CVE-2013-198 8-1.patch, U0002-integer-overflow-in-XResQueryClientResources-CVE- 201.patch - integer overflow in XResQueryClients, XResQueryClientResources CVE-2013-1988 bnc821663, bnc815451...

CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

Integer overflow

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1988

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XResQueryClients and 2 XResQueryClientResources functions...

CVE-2013-1988

CVE-2013-1988 affects X.Org libXRes 1.0.6 and earlier. Multiple integer overflows in XResQueryClients and XResQueryClientResources may cause memory allocation errors and a buffer overflow. Public sources describe potential for privilege escalation or DoS when invalid protocol data is processed by...